The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01239·Published 2019-12-30·Fixed in 1.47.01nb1CWE-269